Image forming apparatus equipped with secure print function, method of controlling the same, and storage medium

ABSTRACT

An image forming apparatus capable of flexibly controlling whether or not to perform user authentication when a user performs operations related to functions of the apparatus. When a user instructs the apparatus to perform any of operations related to a secure print job which is a print job executed by using a secure print function, when the apparatus is operated in a function-based authentication mode, it is determined whether or not a user-selected function of a plurality of functions including at least a secure printing function for printing data in response to an input of a password requires user authentication. When the secure printing function is specified as the user-selected function and it is determined that the user-selected function does not require user authentication, the user is allowed to use the secure printing function, even if the user is not authenticated.

BACKGROUND OF THE INVENTION

Field of the Invention

The present invention relates to an image forming apparatus equippedwith a secure print function, a method of controlling the same, and astorage medium.

Description of the Related Art

There has been generally known a system in which print data transmittedfrom an external apparatus, such as a PC (personal computer), isreserved in an image forming apparatus, and the reserved print data isprinted according to a user's operation performed on a operation panelof the image forming apparatus. This printing is generally referred toas the reservation printing.

In this reservation printing, reserved print data can be printed whenthe user enters a password or performs user authentication on anoperation screen of the image forming apparatus.

This reservation printing is particularly effective in delivering aprintout which the user does not want others to view, when the imageforming apparatus is a shared printer connected to a network.

As an example of the conventional technique related to reservationprinting, there has been proposed a method in which a print job to whicha password is added is transmitted from a PC to an image formingapparatus, and printing is executed when the same password as that addedto the print job is input from the operation panel of the image formingapparatus (Japanese Patent Laid-Open Publication No. 2000-76028).

Although printing using the method of reservation printing is sometimesreferred to as secure printing, confidential printing, private printing,authentication printing, and so on, in the present invention, it isexpressed as a secure print job.

Specifically, the secure print job is, as a general rule, a job executedsuch that printing is started when a correct password is inputted by auser from a console section of the image forming apparatus, and securityof the print job is ensured by placing password-based restrictions onprinting. In this case, however, password-based restrictions on printingcannot be placed on a normal print job which is not a secure print job.

Further, as another method of ensuring security of a print job, therehas been proposed a method of controlling access to a print job, bymanaging print jobs in association with user information of users whoare managed by the image forming apparatus.

In this method, before transmitting a print job from an externalapparatus, the user adds a user name to the print job. Then, userauthentication is performed by the user inputting the user name and apassword to the image forming apparatus or by the user holding an ICcard over a card reader of the image forming apparatus.

Then, the image forming apparatus extracts, from all print jobs, thosehaving a user name added thereto which matches the user nameauthenticated by the image forming apparatus, and allows the user toperform only operations for the extracted print jobs.

According to this method, it is possible to prevent one's print job,including not only a secure print job, but also a normal print job, frombeing unauthorizedly handled by others, and hence it is possible toensure security of all print jobs.

Further, some of the image forming apparatuses that perform userauthentication are equipped with a function of also authenticating userswho are not managed by the image forming apparatus, as guest users. Thisfunction is provided for users who want to temporarily use the imageforming apparatus.

This function makes it possible to temporarily allow, for example, in acase where the image forming apparatus is equipped with a plurality offunctions, such as a copy function, a scan function, and a printfunction, a person as a visitor from the outside to use the copyfunction so as to copy a document as a guest user.

In the case where a user is authenticated as a guest user, the imageforming apparatus cannot identify the user, and hence restricts handlingof a print job from the viewpoint of prevention of information leakage.That is, in general, the image forming apparatus does not allow a guestuser to handle a print job.

Particularly in controlling access to a print job according toauthentication of a user by the image forming apparatus, theabove-described conventional technique has the following problem:

Among image forming apparatuses that provide a plurality of functions,such as a copy function, a scan function, and a print function, there isone which is equipped with a function of switching whether or not torequire user authentication, on a function-by-function basis.

Examples of the above-mentioned function include a function-basedauthentication function which configures the plurality of functions, forexample, in such a manner that the copy function is allowed to be usedwithout user authentication whereas the scan function essentiallyrequires user authentication.

The function-based authentication function is provided for the purposeof saving a user normally managed by the image forming apparatus fromthe time and effort of performing an authentication operation, when theuser uses a function of the image forming apparatus, which isdetermined, from the viewpoint of management, not to essentially requireuser authentication. That is, the function-based authentication functionis different in purpose from the case where the above-mentioned guestuser uses the image forming apparatus.

Although the purpose is different, also in a case where userauthentication is not performed in using the function-basedauthentication function, the image forming apparatus cannot identify auser, similarly to the above-mentioned case of the guest user.

On the other hand, from the viewpoint of security, a print job requiresexecution of access control on a user-by-user basis, and hence requiresidentification of a user.

Therefore, it is required to make user authentication essential to aprint job handling function, and this makes it impossible to save theuser from having to perform an authentication operation.

SUMMARY OF THE INVENTION

The present invention provides an image forming apparatus which iscapable of flexibly controlling whether or not to perform userauthentication when a user performs operations related to variousfunctions of the image forming apparatus, a method of controlling thesame, and a storage medium.

In a first aspect of the present invention, there is provided an imageforming apparatus comprising a login unit configured to allow a user tolog in to the image forming apparatus, a determination unit configuredto determine, in a case where the image forming apparatus operates in afunction-based authentication mode, whether or not a user-selectedfunction of a plurality of functions requires user authentication, theplurality of functions including at least a secure printing function forprinting data in response to an input of a password, and a permissionunit configured to, in a case where the secure printing function isspecified as the user-selected function and it is determined by thedetermination unit that the user-selected function does not require userauthentication, allow the user to use the secure printing function, evenif the user is not authenticated.

In a second aspect of the present invention, there is provided a methodof controlling an image forming apparatus including a login unitconfigured to allow a user to log in to the image forming apparatus,comprising determining, in a case where the image forming apparatusoperates in a function-based authentication mode, whether or not auser-selected function of a plurality of functions requires userauthentication, the plurality of functions including at least a secureprinting function for printing data in response to an input of apassword, and allowing, in a case where the secure printing function isspecified as the user-selected function and it is determined by saiddetermining that the user-selected function does not require userauthentication, the user to use the secure printing function, even ifthe user is not authenticated.

In a third aspect of the present invention, there is provided anon-transitory computer-readable storage medium storing acomputer-executable program for executing a method of controlling animage forming apparatus including a login unit configured to allow auser to log in to the image forming apparatus, wherein the methodcomprises determining, in a case where the image forming apparatusoperates in a function-based authentication mode, whether or not auser-selected function of a plurality of functions requires userauthentication, the plurality of functions including at least a secureprinting function for printing data in response to an input of apassword, and allowing, in a case where the secure printing function isspecified as the user-selected function and it is determined by saiddetermining that the user-selected function does not require userauthentication, the user to use the secure printing function, even ifthe user is not authenticated.

According to the present invention, it is possible to provide an imageforming apparatus which is capable of flexibly controlling whether ornot to perform user authentication when a user performs operationsrelated to various functions of the image forming apparatus, a method ofcontrolling the same, and a storage medium.

Further features of the present invention will become apparent from thefollowing description of exemplary embodiments with reference to theattached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic diagram of an image forming system including animage forming apparatus according to a first embodiment of the presentinvention.

FIGS. 2A and 2B are diagrams each showing an example of a setting screendisplayed on a PC display section appearing in FIG. 1.

FIG. 3 is a flowchart of a print job transmission process executed by aCPU appearing in FIG. 1.

FIG. 4 is a flowchart of a print job reception process executed by a CPUof the image forming apparatus.

FIGS. 5A and 5B are diagrams showing examples of a login receptionscreen displayed on a console section appearing in FIG. 1.

FIG. 6 is a diagram showing an example of a home screen displayed on theconsole section.

FIGS. 7A to 7C are diagrams showing examples of a secure print handlingscreen displayed on the console section.

FIG. 8 is a flowchart of an access control process executed by the CPU.

FIGS. 9A and 9B are flowcharts of variations of the access controlprocess in FIG. 8.

FIGS. 10A and 10B are diagrams showing examples of the secure printhandling screen displayed as a result of the process in FIG. 9B.

FIG. 11 is diagram showing an example of a home screen displayed on aconsole section of an image forming apparatus according to a secondembodiment of the present invention.

FIGS. 12A to 12C are diagrams showing examples of the secure printhandling screen displayed on the console section.

FIG. 13 is a flowchart of a display control process executed by a CPU ofthe image forming apparatus.

FIGS. 14A to 14C are diagrams showing examples of a job history screendisplayed on the console section.

FIG. 15 is a flowchart of a variation of the display control process inFIG. 13.

DESCRIPTION OF THE EMBODIMENTS

The present invention will now be described in detail below withreference to the accompanying drawings showing embodiments thereof.

FIG. 1 is a schematic diagram of an image forming system 1 including animage forming apparatus according to a first embodiment of the presentinvention.

Referring to FIG. 1, the image forming system 1 comprises the imageforming apparatus, denoted by reference numeral 1000, and a PC 21, whichare connected to each other by a network 101.

A control unit 200 of the image forming apparatus 1000 is connected to ascanner section 201 which is an image input device, a printer section202 configured to print an image on a recording sheet, the network 101,and a public communication line 204, to thereby input and output imagedata and device information.

Further, the control unit 200 includes a CPU 205, a RAM 206, a ROM 207,a HDD 208, a console section interface 209, a network interface 211, amodem 212, an SRAM 213, and an RTC 214, which are connected to a systembus 215.

The CPU 205 is a processor that controls the overall operation of theimage forming apparatus 1000. The RAM 206 is a system work memory usedfor operation of the CPU 205, and also functions as a memory fortemporarily storing image data, user information, passwords, and so on.

The ROM 207 is a boot ROM that stores a boot program for the imageforming apparatus 1000. The HDD 208 is a hard disk drive, and storessystem software, application programs, image data, and so forth. The HDD208 further stores programs for executing processes, describedhereinafter.

The console section interface 209 provides interface with a consolesection 210 having a touch panel, and outputs image data to the consolesection 210, which is to be displayed on the console section 210.Further, the console section interface 209 transfers information to theCPU 205, which is input by a user from the console section 210 to theimage forming apparatus 1000.

The network interface 211 is connected to the network 101 to input andoutput information from and to external apparatuses. The modem 212 isconnected to the public communication line 204 to input and outputinformation from and to external apparatuses. The SRAM 213 is a volatilestorage device which can operate at a high speed. In the presentembodiment, however, the SRAM 213 is configured to be equivalent to anonvolatile storage device by making use of a backup power supply.

The RTC 214 is a real time clock, and continues counting the currenttime even in a state where the control unit 200 is not powered on.

The control unit 200 further includes an RIP section 218, a deviceinterface 219, a scanner image processor 220, a printer image processor221, an encryption processor 222, and a decryption processor 223, whichare connected to each other by an image bus 217. The image bus 217 andthe system bus 215 are connected by an image bus interface 216 which isa bus bridge that converts the data structure. The image bus 217 is aPCI bus.

The RIP section 218 is a raster image processor that converts a PDL codeto a bitmap image. The device interface 219 connects the control unit200 to the scanner section 201 and the printer section 202 to performsynchronous-to-asynchronous or asynchronous-to-synchronous conversion ofimage data.

The scanner image processor 220 performs correction, manipulation, andediting of image data input from the scanner section 201. The printerimage processor 221 performs correction, resolution conversion, etc. ofimage data to be printed out. The encryption processor 222 performsprocessing for encrypting input data including image data. Thedecryption processor 223 performs processing for decrypting encrypteddata.

On the other hand, the PC 21 comprises a CPU 20, a printer driver 22, aPC operation section 23, a PC display section 24, and a PC communicationsection 25. The CPU 20 controls the overall operation of the PC 21. Theprinter driver 22 is a driver for controlling the image formingapparatus 1000. The PC operation section 23 comprises a keyboard, amouse, and so forth. The PC display section 24 is a display fordisplaying information to a user. The PC communication section 25 is aNIC (network interface controller) for connecting to the network 101.

With the above-described configuration, the image forming apparatus 1000executes a print job for printing an image on a recording sheet, and auser can perform operations related to the print job. Further, a printjob is executed according to an instruction from the PC 21, and anexpression “to send a print job” means “to transmit, from the PC 21,print data for instructing the image forming apparatus 1000 to execute aprint job”.

Next, transmission of a print job from the PC 21 will be described. Whensending a print job, a user configures settings on the PC operationsection 23.

FIGS. 2A and 2B are diagrams each showing an example of a setting screendisplayed on the PC display section 24 appearing in FIG. 1.

FIG. 2A shows a printer driver setting screen, and FIG. 2B shows asecure print setting screen.

On these setting screens, a secure print job can be set. The secureprint job is a job which allows a user to perform operations related tothe print job, including an operation for starting printing, oncondition that the user is authenticated as the owner of the job byinputting a correct password from the console section 210 of the imageforming apparatus 1000. The setting of a secure print job is made so asto maintain the security of a print job by restricting execution ofprinting by means of a password. Thus, the image forming apparatus 1000has a secure print function that allows, when a user intends to performoperations related to a print job for printing an image on a recordingsheet, the user to perform the operations related to the print job oncondition that the user is authenticated as the owner of the print job.

As shown in FIG. 2A, on the printer driver setting screen, denoted byreference numeral 301, it is possible to make settings on printing,including whether or not to use secure printing, a sheet size, thenumber of copies, and whether or not to include a stamp. To activate thesetting for secure printing, the user enters a check mark in a secureprint usage checkbox 302, and presses an OK button 303. To abort thesetting operation, the user presses a cancel button 304.

As shown in FIG. 2B, on the secure print setting screen, denoted byreference numeral 321, a user name entry form 322 and a password entryform 323 are displayed. Note that user information of the PC 21 beingused by the user may be set as a default value in the user name entryform 322. Further, the printer driver 22 may set a default value in thepassword entry form 323. To finalize the settings on the secure printsetting screen, the user presses an OK button 324. To abort the settingoperation, the user presses a cancel button 325.

The PC 21 sends a print job according to the settings made on theabove-described setting screens.

FIG. 3 is a flowchart of a print job transmission process executed bythe CPU 20 appearing in FIG. 1.

Referring to FIG. 3, the PC operation section 23 receives an instructionfrom the user for displaying the printer driver setting screen, anddisplays the printer driver setting screen 301 on the PC display section24 (step S201).

Next, the PC operation section 23 acquires the settings of a print job,appearing in the printer driver setting screen 301, which have been madeby user's operations (step S202), and configures settings related to theprint job based on the acquired settings.

Then, the printer driver 22 acquires a setting in the secure print usagecheckbox 302 (step S203).

Then, the printer driver 22 determines whether or not the secure printsetting has been activated based on the acquired setting in the secureprint usage checkbox 302 (step S204).

If it is determined in the step S204 that the secure print setting hasnot been activated (NO to the step S204), the printer driver 22 sendsthe print job as a normal print job which is not a secure print job tothe image forming apparatus 1000 (step S208), followed by terminatingthe present process.

On the other hand, if it is determined in the step S204 that the secureprint setting has been activated (YES to the step S204), the printerdriver 22 displays the secure print setting screen 321 on the PC displaysection 24, and requests the user to enter settings of a secure printjob (step S205).

The printer driver 22 acquires the settings of the secure print jobentered by the user on the secure print setting screen 321 (step S206).

Then, the printer driver 22 generates a secure print job by adding auser name and a password to the image data (step S207). Then, theprinter driver 22 sends the print job as the secure print job to theimage forming apparatus 1000 (step S208), followed by terminating thepresent process.

Although the user name is used in the step S207, not only the user namebut also other identification information, such as a domain name of thePC 21 used by the user, may be added to the information.

FIG. 4 is a flowchart of a print job reception process executed by theCPU 205 of the image forming apparatus 1000 appearing in FIG. 1.

Referring to FIG. 4, the CPU 205 receives a print job sent from the PC21 (step S401), stores the received print job in the HDD 208, anddetermines whether or not the received print job is a secure print job(step S402).

If it is determined in the step S402 that the received print job is nota secure print job (NO to the step S402), the CPU 205 executes thereceived print job (step S404), followed by terminating the presentprocess.

On the other hand, if it is determined in the step S402 that thereceived print job is a secure print job (YES to the step S402), the CPU205 reserves the print job (step S403), followed by terminating thepresent process. “To reserve a print job” is in other words “to suspendexecution of the print job”.

Next, a description will be given of a user interface displayed on theconsole section 210 in an access control process for controllingoperations for starting the image forming apparatus 1000, causing asecure print job to be executed, and so forth.

FIGS. 5A and 5B are diagrams showing examples of a login receptionscreen displayed on the console section 210 appearing in FIG. 1.

FIG. 5A shows the login reception screen, denoted by reference numeral6001, displayed in a case where guest login is provided. On the otherhand, FIG. 5B shows the login reception screen, denoted by referencenumeral 11001, displayed in a case where guest login is not provided.

Referring to FIGS. 5A and 5B, a user name entry field 6002 is a fieldfor inputting a user name of his/her own by the user. A password entryfield 6003 is a field for inputting a user's password.

A login button 6004 is used for causing the image forming apparatus 1000to execute authentication so as to log in to the image forming apparatus1000 after the user has input the user name and password. By pressingthis button, a user authentication process is executed.

Further, a guest login button 6005 appearing in FIG. 5A is used by auser who is not managed by the image forming apparatus 1000, for loggingin to the image forming apparatus 1000 as a guest user (or unknownuser). In contrast to the guest user, a user who is managed by the imageforming apparatus 1000 is sometimes expressed as a general user in thefollowing description. Thus, the users of the image forming apparatus1000 include general users whose user names are managed by the imageforming apparatus 1000 and guest users whose user names are not managedby the image forming apparatus 1000.

Further, differently from the login reception screen 6001, the guestlogin button 6005 is not displayed on the login reception screen 11001shown in FIG. 5B.

FIG. 6 is a diagram showing an example of a home screen displayed on theconsole section 210 appearing in FIG. 1.

Referring to FIG. 6, the home screen, denoted by reference numeral 7001,is used by the user for making use of various functions equipped in theimage forming apparatus 1000, such as a copy function, ascan-and-transmit function, a scan-and-store function, a storedfile-using function, a secure print function, and a reception trayfunction. A secure print button 7002 on the home screen 7001 is forhandling a secure print job.

FIGS. 7A and 7C are diagrams showing examples of a secure print handlingscreen displayed on the console section 210 appearing in FIG. 1.

Referring to FIGS. 7A to 7C, a job list 8002 on the secure printhandling screen, denoted by reference numeral 8001, is an area fordisplaying a list of secure print jobs. A job selection checkbox 8005 isfor selecting a secure print job.

A print button 8003 is for starting printing for a selected secure printjob. A cancel button 8004 is for canceling printing of the selectedsecure print job.

The user can select a secure print job to be handled, by entering acheck mark in the job selection checkbox 8005, and instruct the imageforming apparatus 1000 to start or cancel printing by pressing the printbutton 8003 or the cancel button 8004, respectively.

FIG. 7A shows an example of the secure print handling screen on whichsome of the job names are masked with asterisks.

In FIG. 7A, as for the secure print jobs having the user name “User 1”,the job names are displayed.

On the other hand, as for the secure print jobs having the user names“User 2” and “User 3”, which are not “User 1”, the job names are maskedwith asterisks.

Further, if the user selects a job having the user name “User 2” or“User 3” by entering a check mark in the job selection checkbox 8005 onthe secure print handling screen 8001 shown in FIG. 7A, the print button8003 and the cancel button 8004 are grayed out, and hence the user canperform neither of handling operations for printing and canceling.

FIG. 7B shows an example of the secure print handling screen on whichall job names are masked with asterisks.

Even when the user selects any of the jobs by entering a check mark inthe job selection checkbox 8005 on the secure print handling screen 8001shown in FIG. 7B, the print button 8003 and the cancel button 8004 aregrayed out, and hence the user perform neither of handling operationsfor printing and canceling.

Further, in FIG. 7A, when the user presses the print button 8003 or thecancel button 8004, a password entry screen, not shown, for the secureprint job is displayed.

The user inputs the password added to the print job on the passwordentry screen to thereby complete handling of the job. However, unlessthe input password matches the password added to the print job, thehandling of the instructed job is not executed.

FIG. 7C shows an example of the secure print handling screen on whichnone of the job names are masked.

Even when the user selects any of the jobs by entering a check mark inthe job selection checkbox 8005 on the secure print handling screen 8001shown in FIG. 7C, the print button 8003 and the cancel button 8004 arenot grayed out, and hence the user is allowed to perform handlingoperations for printing and canceling.

FIG. 8 is a flowchart of an access control process executed by the CPU205 appearing in FIG. 1.

The access control process in FIG. 8 is executed when the image formingapparatus 1000 is started. Further, an operation mode in which theaccess control process is performed includes a login mode and afunction-based authentication mode.

The login mode is a mode in which the image forming apparatus 1000always executes user authentication before the user is allowed to usethe image forming apparatus 1000. Further, in the login mode, the imageforming apparatus 1000 has a function of authenticating even a user whois not managed by the image forming apparatus 1000, as a guest user.

On the other hand, the function-based authentication mode is anoperation mode in which whether or not to require user authenticationcan be determined for each of the various functions equipped in theimage forming apparatus 1000 before a user uses the image formingapparatus 1000. The various functions include the copy function, a printjob handling function, the scan-and-transmit function for scanning andtransmitting an image, and a detailed information-displaying functionfor displaying detailed information on the history of executed printjobs.

In the function-based authentication mode, for example, it is possibleto set the copy function as a function which does not require userauthentication and is allowed to be used by any user without performinguser authentication, and set the print job handling function as afunction which requires user authentication, and is allowed to be usedonly in a case where the user is authenticated.

Referring to FIG. 8, the CPU 205 determines whether or not the operationmode is the function-based authentication mode (step S501). If it isdetermined in the step S501 that the operation mode is not thefunction-based authentication mode, but the login mode (NO to the stepS501), the CPU 205 executes a startup process in the login mode (stepS502).

When the startup process in the login mode is completed, the CPU 205displays the login reception screen 6001, described with reference toFIG. 5A, on the console section 210 (step S503). In this step, the userexecutes login after entering a user name and a password from the loginreception screen 6001, or executes login as a guest user.

If the login authentication has failed (NO to a step S504), the CPU 205returns to the step S503, whereas if the login authentication issuccessful, allowing the user to log in (YES to the step S504), the CPU205 displays the home screen 7001, described with reference to FIG. 6,on the console section 210 (step S505).

Next, if the user presses the secure print button 7002 on the homescreen 7001 to handle a secure print job (YES to a step S506), the CPU205 displays the secure print handling screen 8001, described withreference to FIG. 7A or 7B, on the console section 210 (step S507).

On the other hand, if the secure print button 7002 has not been pressedin the step S506 (NO to the step S506), the CPU 205 determines whetheror not any other button has been pressed (step S506A). If no button hasbeen pressed (NO to the step S506A), the CPU 205 returns to the stepS506, whereas if one of the other buttons has been pressed (YES to thestep S506A), the CPU 205 allows the user to execute processing of afunction corresponding to the pressed button (step S506B).

When the secure print handling screen is displayed in the step S507, theCPU 205 determines whether or not the currently logged-in user is aguest user (step S508). If it is determined in the step S508 that thecurrently logged-in user is a general user (NO to the step S508), theCPU 205 allows the currently logged-in user to perform only an operationrelated to the secure print job of his/her own (step S509), followed byterminating the present process. As described above, in the presentembodiment, when a user is authenticated as a general user, the user isallowed to perform the operation related to the secure print job of thegeneral user, whereas when a user is authenticated as a guest user, asdescribed hereinafter, the user is inhibited from performing any ofoperations related to all the secure print jobs.

In this process, depending on whether or not a user name of thecurrently logged-in user matches a user name added to a secure printjob, control is performed for switching the method of displaying thelist of jobs and determining whether or not to allow the currentlylogged-in user to perform an operation related to the secure print job.

That is, when the currently logged-in user has the user name of “User1”, the secure print handling screen 8001 shown in FIG. 7A is displayedon the console section 210.

On the other hand, if it is determined in the step S508 that thecurrently logged-in user is a guest user (YES to the step S508), the CPU205 inhibits the user from handling any of all secure print jobs (stepS510), followed by terminating the present process. In this step, thesecure print handling screen 8001 shown in FIG. 7B is displayed on theconsole section 210.

Referring again to the step S501, if it is determined in the step S501that the operation mode is the function-based authentication mode (YESto the step S501), the CPU 205 executes the startup process in thefunction-based authentication mode (step S511).

When the startup process in the function-based authentication mode iscompleted, the CPU 205 displays the home screen 7001, described withreference to FIG. 6, on the console section 210 (step S512).

Next, when the user presses the secure print button 7002 to handle asecure print job on the home screen 7001 (YES to a step S513), the CPU205 determines whether or not a secure print handling function is set tobe allowed to be used without user authentication in the function-basedauthentication mode (step S514). The “secure print handling function” isintended to mean a function for providing operations related to a secureprint job, such as a handling operation for executing printing of thesecure print job and a handling operation for canceling the secure printjob.

If it is determined in the step S514 that the secure print handlingfunction is set not to require user authentication (YES to the stepS514), the CPU 205 displays the secure print handling screen 8001,described with reference to FIG. 7C, on the console section 210 (stepS515).

Then, the CPU 205 allows the user to perform handling of all secureprint jobs (step S516), followed by terminating the present process.

In FIG. 7C, none of the “job names” of all secure print jobs are masked,whereby the user is allowed to perform handling operations for printingand canceling for all jobs. However, since a password has been added toeach secure print job, unless the user enters a correct password,neither of handling operations for printing and canceling is actuallycompleted.

Therefore, a user who does not know the password cannot execute anyhandling operation, and hence the security level is prevented from beinglowered.

Further, as for operations related to normal print jobs other than thesecure print jobs, the access control is performed such that a currentlylogged-in user is allowed to perform only an operation related to aprint job of his/her own. Therefore, it is possible to maintain thesecurity.

On the other hand, if it is determined in the step S514 that the secureprint handling function is not set to be allowed to be used without userauthentication (NO to the step S514), the CPU 205 displays the loginreception screen 11001, described with reference to FIG. 5B, on theconsole section 210 (step S517). In this step, the user executes loginby entering the user name and the password from the login receptionscreen 6001.

Further, the guest login button is not displayed on the login receptionscreen 11001. This is because the image forming apparatus 1000 does notprovide a login function to be used by a guest user in thefunction-based authentication mode.

If the login authentication has failed (NO to a step S518), the CPU 205returns to the step S517, whereas if the login authentication issuccessful, allowing the user to log in to the image forming apparatus1000 (YES to the step S518), the CPU 205 displays the secure printhandling screen 8001, described with reference to FIG. 7A, on theconsole section 210 (step S519).

Then, the CPU 205 allows the currently logged-in user to perform onlythe operation related to the secure print job of his/her own (stepS520), followed by terminating the present process.

According to the access control process in FIG. 8, even in a case wherethe access control is performed to allow a user who has logged inaccording to user authentication to perform only an operation related toa print job of the currently logged-in user, when the secure printhandling function is set not to require user authentication in thefunction-based authentication mode, the control is performed to allowthe user to handle a secure print job.

Therefore, when the user handles the secure print job, the user isallowed to perform handling of the secure print job without performingthe login operation, which makes it possible to improve operability anduser-friendliness.

On the other hand, as for a normal print job which is not restricted bymeans of a password, the access control is performed such that a userwho has logged in according to user authentication is allowed to performonly a handling operation of the print job of his/her own, and hence thesecurity is maintained.

Further, as shown in the step S514, according to the present embodiment,it is possible to flexibly control whether or not to performauthentication when a user performs operations related to variousfunctions equipped in the image forming apparatus, according to thesetting of whether or not each function is allowed to be used withoutauthentication.

Further, as shown in the steps S514 to S520, in the present embodiment,when it is determined that an operation related to a secure print job isset to require authentication, the operation related to the secure printjob of a general user is allowed to be executed, whereas the operationrelated to the secure print job of a guest user is not allowed to beexecuted.

FIGS. 9A and 9B are flowcharts of variations of the access controlprocess in FIG. 8.

In the variation of the FIG. 8 access control process, shown in FIG. 9A,it is preconditioned that the setting for switching whether or not toallow a user to perform handling of secure print jobs has been made alsofor a user who has logged in as a guest user.

The variation of the FIG. 8 access control process, shown in FIG. 9A,differs from the access control process in FIG. 8 from after theaffirmative answer to the question of the step S508, and hence FIG. 9Ashows only different steps following the step S508.

Referring to FIG. 9A, the CPU 205 determines whether or not the settingof secure print jobs is such that secure print jobs are allowed to behandled also by a guest user (step S1201).

If it is determined in the step S1201 that the setting of secure printjobs is such that secure print jobs are allowed to be handled also by aguest user (YES to the step S1201), the CPU 205 allows the user toperform handling of only secure print jobs of the guest user (stepS1202), followed by the present process. Thus, in the presentembodiment, when a user is authenticated as a general user, the user isallowed to perform an operation related to a secure print job of thegeneral user, and when a user is authenticated as a guest user, the useris allowed to perform operations related to secure print jobs only in acase where the setting of secure print jobs is such that secure printjobs are allowed to be handled also by a guest user.

This causes the secure print handling screen described with reference toFIG. 7C to be displayed on the console section 210, thereby allowing theguest user as well to perform the operation related to the secure printjob.

On the other hand, if it is determined in the step S1201 that thesetting of secure print jobs is not such that secure print jobs areallowed to be handled also by a guest user (NO to the step S1201), theCPU 205 inhibits the user from handling any of all secure print jobs(step S1203), followed by terminating the present process.

This causes the secure print handling screen described with reference toFIG. 7B to be displayed on the console section 210, thereby inhibitingthe user from handling any of all secure print jobs.

According to the variation of the FIG. 8 access control process, shownin FIG. 9A, it is possible to make settings which permit even a guestuser to handle secure print jobs.

Next, the variation of the FIG. 8 access control process, shown in FIG.9B, will be described. In the variation of the FIG. 8 access controlprocess, shown in FIG. 9B, the secure print jobs which are allowed to behandled are switched depending on whether the operation mode is thelogin mode or the function-based authentication mode.

The secure print jobs which are allowed to be handled are switcheddepending on whether the operation mode is the login mode or thefunction-based authentication mode because different use cases areexpected which are different in the purpose of use as a precondition,i.e. a case where a guest user uses the secure print function in thelogin mode and a case where a user uses the secure print functionwithout user authentication in the function-based authentication mode.

For example, in general, the guest user in the login mode is assumed tobe not a user who uses the image forming apparatus 1000 on a dailybasis, but a user who temporarily uses the same as a guest.

On the other hand, it is generally assumed that the function forallowing a user to use the image forming apparatus 1000 without userauthentication in the function-based authentication mode is used by auser who wishes to use the image forming apparatus 1000 in an easy andabbreviated manner on a daily basis without authentication.

The variation of the FIG. 8 access control process, shown in FIG. 9B,differs from the access control process in FIG. 8 from after theaffirmative answer to the question of the step S508, and in the stepS516 and the subsequent steps, and hence FIG. 9B shows only thedifferent steps. This variation is the same as FIG. 9A in processing inwhich the CPU 205 proceeds from the step S508 to the step S1201, andwhen the answer to the question of the step S1201 is negative, the CPU205 proceeds to the step S1203, and hence the description starts fromafter the affirmative answer to the question of the step S1201.

In the variation of the FIG. 8 access control process, shown in FIG. 9B,it is determined as to each of the secure print jobs reserved in theimage forming apparatus 1000 whether or not a user name indicative of anowner of each job, which is added to the job, matches any user name ofone or more users managed by the image forming apparatus 1000.

According to this determination performed as to each of the secure printjobs, if a user who is an owner of a secure print job is not a usermanaged by the image forming apparatus 1000, the secure print job isregarded as a print job of an unknown user, whereas if the user is ageneral user, the secure print job is naturally regarded as a print jobof the general user.

Based on this, the CPU 205 determines whether or not the secure printjob is a print job of an unknown user (step S1301).

If it is determined in the step S1301 that the secure print job is aprint job of an unknown user (YES to the step S1301), it is judged thatthe secure print job is a print job of the unknown user who has loggedin as a guest user, and allows the user to handle the secure print job(step S1303), followed by terminating the present process.

On the other hand, if it is determined in the step S1301 that the secureprint job is not a print job of an unknown user (NO to the step S1301),this indicates that an unknown user who has logged in as a guest user isabout to handle a print job of a general user, and hence the CPU 205inhibits handling of the secure print job (step S1302), followed byterminating the present process.

Next, steps of the FIG. 9B access control process following the stepS515 will be described.

First, similarly to the step S1301, the CPU 205 determines whether ornot the secure print job is a print job of an unknown user (step S1304).

If it is determined in the step S1304 that the secure print job is aprint job of an unknown user (YES to the step S1304), the secure printjob is not a print job of a general user, which is set to be allowed tobe used without authentication in order for the general user to easilyuse the secure print function in the function-based authentication mode,and hence the CPU inhibits the user from handling the secure print job(step S1306), followed by terminating the present process.

On the other hand, if it is determined in the step S1304 that the secureprint job is not a print job of an unknown user (NO to the step S1304),the secure print job is a print job of a general user, which is set tobe allowed to be used without authentication in order for the generaluser to easily use the secure print function in the function-basedauthentication mode, and hence the CPU 205 allows the user to handlingthe secure print job (step S1305), followed by terminating the presentprocess.

FIGS. 10A and 10B are diagrams showing examples of the secure printhandling screen displayed as a result of the variation of the FIG. 8access control process, shown in FIG. 9B.

FIG. 10A shows an example of the secure print handling screen displayedon the console section 210 as a result of processing according to thesteps S1301 and the step S1302 or processing according to the stepS1303.

Referring to FIG. 10A, it is assumed that the user names “User 1”, “User2”, and “User 3” are the user names of general users, and the user name“User 4” is a user name of an unknown user.

In this case, as shown on the secure print handling screen 8001, thesecure print jobs having the user names “User 1”, “User 2”, and “User 3”are the print jobs of the general users, and all job names of theseprint jobs are masked with asterisks.

Further, if an unknown user selects these print jobs, the unknown useris inhibited from performing handling operations for printing andcanceling.

On the other hand, it is judged that the secure print job having theuser name “User 4” is a print job of an unknown user, and if the userwho has logged in as a guest user selects this print job, the user isallowed to perform handling operations for printing and canceling.

As described above, the job names of secure print jobs of general usersmanaged by the image forming apparatus 1000, i.e. users who use theimage forming apparatus 1000 on a daily base are masked to a guest userwho temporarily uses the image forming apparatus in the login mode, andthe guest user is inhibited from handling the jobs, and hence it ispossible to obtain the effect of preventing information from beingleaked to an unknown user.

Further, FIG. 10B shows an example of the secure print handling screendisplayed on the console section 210 as a result of processing accordingto the steps S1304 and S1305 or processing according to the step S1306.

Also in FIG. 10B, it is assumed that the user names “User 1”, “User 2”,and “User 3” are the user names of general users, and the user name“User 4” is a user name of an unknown user.

In this case, as shown on the secure print handling screen 8001, thesecure print jobs of the user names “User 1”, “User 2”, and “User 3” arethe print jobs of the general users, and if a general user selects a jobof his/her own from these print jobs, the general user is allowed toperform handling operations for printing and canceling.

On the other hand, the secure print job of the user name “User 4” is aprint job of the unknown user, and the job name is masked withasterisks, and if a general user selects this print job as shown in theillustrated example in FIG. 10B, the general user is inhibited fromperforming handling operations for printing and canceling.

As described above, even in a case where the secure print handlingfunction is used without authentication in the function-basedauthentication mode, only secure print jobs of a general user, i.e. auser who uses the image forming apparatus 1000 on a daily base, areallowed to be handled, and hence it is possible to obtain theadvantageous effect of preventing unauthorized use by an unknown user.

Next, a description will be given of a second embodiment of the presentinvention. The present embodiment differs from the first embodiment inthe display control process for controlling the displayed content on thesecure print handling screen 8001 of the image forming apparatus 1000,more particularly the user interface displayed on the console section210, and is the same in the other hardware configuration and in thesoftware configuration, except processes described in detailhereinafter, as those of the first embodiment, and hence the componentelements corresponding to those of the first embodiment are denoted bythe same reference numerals, and description thereof is omitted.Hereinafter, the following description will be given of the differentpoints.

FIG. 11 is a diagram showing an example of the home screen displayed onthe console section 210 appearing in FIG. 1.

Referring to FIG. 11, the home screen 7001 has a job history displaybutton 7005 newly added to the home screen described with reference toFIG. 6. By pressing the job history display button 7005, the history ofprint jobs is displayed. This history will be described hereinafter.Further, the following description is given of an example in which ascan-and-transmit button 7004 is used. The scan-and-transmit button 7004is a button used for selecting a function for scanning an original usingthe scanner section 201 and transmitting data to a destination.

FIGS. 12A to 12C are diagrams showing examples of the secure printhandling screen displayed on the console section 210 appearing in FIG.1.

FIG. 12A shows an example of the display of a list of all secure printjobs reserved in the image forming apparatus 1000. The cancel button8004 is grayed out and the user is prevented from pressing it.

FIG. 12B shows an example of the display of the list of all secure printjobs reserved in the image forming apparatus 1000. FIG. 12B differs fromFIG. 12A in that the cancel button 8004 is not grayed out and the useris allowed to press it.

FIG. 12C shows an example of the display of a list of only secure printjobs out of all secure print jobs reserved in the image formingapparatus 1000, each having a user name, added to the secure print job,which matches the user name of a currently logged-in user.

In FIG. 12C, only secure print jobs of the user who has logged in usingthe user name “User 1” are displayed by way of example.

Further, an all job display button 8006 is provided on the secure printhandling screen shown in FIG. 12C. The all job display button 8006 is abutton used for displaying the list of all secure print jobs, and whenthe user presses the all job display button 8006, the display screen ischanged to the screen shown in FIG. 12A, and the list of all secureprint jobs reserved in the image forming apparatus 1000 is displayed.Note that in this case, however, the currently logged-in user is allowedto perform a handling operation for canceling only for a secure printjob of his/her own.

FIG. 13 is a flowchart of a display control process executed by the CPU205 appearing in FIG. 1.

Note that in the display control process in FIG. 13, it is assumed thatthe secure print function of the image forming apparatus 1000 is set tobe allowed to be used without user authentication, and thescan-and-transmit function is set to require user authentication.

Referring to FIG. 13, the CPU 205 displays the home screen 7001described with reference to FIG. 11 on the console section 210 (stepS1401).

Next, the CPU 205 determines whether or not the user has pressed any oneof the function buttons (step S1402). Note that the function buttonsreferred to in the present process are limited to the secure printbutton 7002 and the scan-and-transmit button 7004, and description ofcases where other function buttons are pressed are omitted.

Then, the CPU 205 determines whether or not the user has pressed secureprint button 7002 (step S1403). If it is determined in the step S1403that the user has pressed the secure print button 7002 (YES to the stepS1403), the CPU 205 displays the secure print handling screen 8001described with reference to any of FIGS. 12A to 12C on the consolesection 210 (step S1404).

As mentioned above, the secure print function is set to be allowed to beused without user authentication according to the settings of thefunction-based authentication mode, and hence it is not necessary todisplay the login screen for authenticating a user by the image formingapparatus 1000.

Further, although FIGS. 12A to 12C show the screen on which the list ofsecure print jobs has already been displayed on the job list 8002,secure print jobs to be displayed on the job list 8002 are determined inthe following steps.

Next, the CPU 205 determines whether or not the user has beenauthenticated by the image forming apparatus 1000, and is currentlylogged-in (step S1405).

If it is determined in the step S1405 that the user is not currentlylogged-in (NO to the step S1405), the CPU 205 displays the secure printhandling screen described with reference to FIG. 12A (step S1406), andreturns to the step S1401. As described above, in the presentembodiment, when it is determined that the operations related to asecure print job are set not to require authentication and also the userhas not been authenticated (NO to the step S1405), the user is allowedto perform ones of the operations related to the secure print job otherthan the canceling operation for deleting the secure print job displayedon the secure print handling screen.

The secure print handling screen enables the user to select his/her jobof which the password the user knows to execute printing. Further, inFIG. 12A, the cancel button 8004 cannot be pressed as mentioned above,and hence it is also possible to prevent jobs of the others from beingcarelessly canceled.

On the other hand, if it is determined in the step S1405 that the useris currently logged-in (YES to the step S1405), the CPU 205 determineswhether or not the currently logged-in user is an administrator (stepS1407). Note that the administrator is a person who is in charge of themanagement of the image forming apparatus 1000, and is authenticated bythe image forming apparatus 1000 as the administrator, in a mannerdistinguished from other users.

If it is determined in the step S1407 that the currently logged-in useris an administrator (YES to the step S1407), the CPU 205 displays thesecure print handling screen described with reference to FIG. 12B (stepS1408), and returns to the step S1401.

On the secure print handling screen shown in FIG. 12B, the administratoris allowed to perform the canceling operation for all secure print jobs,and can delete the secure print jobs unnecessarily reserved in the imageforming apparatus 1000.

On the other hand, if it is determined in the step S1407 that thecurrently logged-in user is not an administrator (NO to the step S1407),the CPU 205 displays the secure print handling screen described withreference to FIG. 12C (step S1409), and returns to the step S1401.

As shown in FIG. 12C, the currently logged-in user who is not anadministrator is enabled to immediately handle the print job withouttime and effort of searching for his/her print jobs. Thus, in thepresent embodiment, when it is determined that the operations related tothe secure print job are set not to require authentication, and also theuser is authenticated as an administrator, the user is allowed toperform the operations related to all of the secure print jobs. On theother hand, when the user is not authenticated as an administrator, theuser is allowed to perform only operations related to a secure print jobof the user.

Referring again to the step S1403, if it is determined in the step S1403that the user has pressed not the secure print button 7002 but thescan-and-transmit button 7004 (NO to the step S1403), the CPU 205displays the login reception screen 11001 described with reference toFIG. 5B (step S1410).

The login reception screen 11001 is displayed in this step because the“scan-and-transmit” function is set as a function which requires userauthentication according to the settings of the function-basedauthentication function.

When the user enters a user name and a password from the login receptionscreen 11001 to execute login, and if login authentication has failed(NO to a step S1411), the CPU 205 returns to the step S1410, whereas ifthe login authentication is successful, allowing the user to log in (YESto the step S1411), the CPU 205 displays a scan operation screen, notshown, on the console section 210 (step S1412), and returns to the stepS1401.

Although in the process in FIG. 13, the CPU 205 returns to the stepS1401 after execution of the step S1412, if the user does not explicitlyperform a logout operation, the login state is maintained.

Therefore, if the user intends to handle a secure print job in a statein which user's login is maintained as mentioned above, the CPU 205proceeds from the step S1405 to the step S1407.

Further, where to proceed from the step S1407 is determined depending onthe determination of whether or not the user who has logged in to theimage forming apparatus 1000 is an administrator in the userauthentication processing in the steps S1410 and S1411.

In the display control process in FIG. 13, the method of displayingsecure print jobs and the control of access thereto for handling areproperly switched and controlled depending on whether or not the user iscurrently logged-in, and further whether or not the currently logged-inuser is an administrator. This makes it possible to improve theoperability and user-friendliness.

Although in the display control process in FIG. 13, the method ofdisplaying the secure print jobs and so on has been described, themethod may be applied to any other print job, insofar as it is a printjob including user information of a user who has issued the print job(owner of the print job).

Next, a description will be given of the display of the job historyinformation. First, the user interface displayed on the console section210 will be described.

FIGS. 14A to 14C are diagrams showing examples of a job history screendisplayed on the console section 210 appearing in FIG. 1.

The job history screen, denoted by reference numeral 10001, shown inFIGS. 14A to 14C displays history information of jobs recorded in theHDD 208 of the image forming apparatus 1000.

Referring to FIGS. 14A to 14C, a job history list 10002 is an area fordisplaying a list of job history records.

A job history selection checkbox 10005 is for selecting a job historyrecord. A detailed information button 10007 is for displaying detailedinformation of one job history record. The detailed information includesthe number of pages, the number of printed sheets, a sheet size,color/monochrome, a document name, and so on, of each job.

The user can refer to the detailed history information by selecting adesired job history record by entering a check mark in the job historyselection checkbox 10005 and pressing the detailed information button10007.

FIG. 14A displays the job history screen 10001 in which the list of alljob history records is displayed, but the job names of all job historyrecords are masked with asterisks, and further the detailed informationbutton 10007 is always grayed out for preventing the user from pressingit.

FIG. 14B displays the job history screen 10001 in which the list of alljob history records and job names is displayed, and further the detailedinformation button 10007 is always displayed for allowing the user torefer to the detailed information.

FIG. 14C displays the job history screen 10001 in which the list of alljob history records is displayed, but the displayed job names are onlythose of extracted job history records each having a user name whichmatches the user name of the currently logged-in user.

That is, the job name of a job history record not having a user namewhich matches the user name of the currently logged-in user is maskedwith asterisks. FIG. 14C shows an example in which only job historyrecords of the user who has logged in using the user name “User 1” areextracted, and the job names of the extracted history records aredisplayed.

Further, the detailed information button 10007 is allowed to be pressedonly when a job history record having a user name that matches the username of the currently logged-in user is selected by entering a checkmark in the job history selection checkbox 10005.

Assuming the image forming apparatus 1000 is configured as above, aprocess for controlling the display of the job history screen will bedescribed.

FIG. 15 is a flowchart of a variation of the display control process inFIG. 13.

The display control process in FIG. 15 is for controlling the method ofdisplaying the detailed information from the job history information.Further, the display control process in FIG. 15 is executed when theuser presses the job history display button 7005 as a function button inthe step S1403 in FIG. 13, and hence the steps following the step S1403will be described.

Referring to FIG. 15, first, the CPU 205 displays the job history screen10001, described with reference to FIGS. 14A to 14C, on the consolesection 210 (step S1501). In this step, it is assumed that a job historydisplaying function is set to be allowed to be used without userauthentication according to the settings of the function-basedauthentication mode.

Next, the CPU 205 determines whether or not the detailed information isunconditionally allowed to be displayed (step S1502). In thisdetermination, a setting in a checkbox provided in advance, inassociation with permission of displaying of the job history, is used.This checkbox is provided in advance as one of the setting items forconfiguring various settings of the image forming apparatus 1000, andnormally, an administrator logs in to the image forming apparatus 1000when making or changing the setting in the checkbox.

If it is determined in the step S1502 that the detailed information isunconditionally allowed to be displayed (YES to the step S1502), the CPU205 displays the job history screen 10001 described with reference toFIG. 14B (step S1506), and returns to the step S1401.

On the other hand, if it is determined in the step S1502 that thedetailed information is not unconditionally allowed to be displayed (NOto the step S1502), the CPU 205 determines whether or not the user iscurrently logged-in (step S1503).

If it is determined in the step S1503 that the user is currently notlogged-in (NO to the step S1503), the CPU 205 displays the job historyscreen 10001 described with reference to FIG. 14A (step S1504), andreturns to the step S1401. As described above, in the presentembodiment, it is determined whether or not the detailed information isalways allowed to be displayed, and if it is determined that thedetailed information is not always allowed to be displayed, and also theuser is not authenticated, the detailed information of all executedprint jobs is inhibited from being displayed.

As described above, in a case where a user has not logged in to theimage forming apparatus 1000, the job history screen 10001 in FIG. 14Ais displayed, whereby it is possible to prevent unidentified users frombeing carelessly allowed to refer to the detailed information of the jobhistory. However, the list of the job history is displayed, and hencethe user can obtain minimum information, such as a result (OK/NG) ofhis/her own job.

On the other hand, if it is determined in the step S1503 that the useris currently logged-in (YES to the step S1503), the CPU 205 determineswhether or not the currently logged-in user is an administrator (stepS1505).

If it is determined in the step S1505 that the currently logged-in useris an administrator (YES to the step S1505), the CPU 205 displays thejob history screen 10001 described with reference to FIG. 14B (stepS1506), and returns to the step S1401. As described hereinabove, the jobhistory screen 10001 in FIG. 14B is a screen on which the detailedinformation of all job history records is allowed to be displayed.

On the other hand, if it is determined in the step S1505 that thecurrently logged-in user is not an administrator (NO to the step S1505),the CPU 205 displays the job history screen 10001 described withreference to FIG. 14C (step S1507). As described hereinabove, the jobhistory screen 10001 in FIG. 14C is a screen on which only job historyrecords each having a user name which matches the user name of thecurrently logged-in user are extracted and the job names of theextracted jobs are displayed. Thus, in the present embodiment, it isdetermined whether or not the detailed information is always allowed tobe displayed, and if it is determined that the detailed information isnot always allowed to be displayed, and also the user is authenticatedas an administrator, the detailed information of history of all executedprint jobs is allowed to be displayed. On the other hand, if the user isnot authenticated as an administrator, only detailed information ofhistory of the executed print jobs of the user is allowed to bedisplayed.

Thus, in a state in which the user has logged in to the image formingapparatus 1000, it is possible to allow the user to refer to onlyhistory information of jobs of the currently logged-in user.

As described above, the job history displaying method is properlyswitched according to whether or not the user is currently logged-in,and further whether or not the currently logged-in user is anadministrator, as described in the process shown in FIG. 15. This makesit possible to prevent information from being leaked from the jobhistory without damaging the user-friendliness.

Further, although in the processes in FIGS. 13 and 15, as to the loginoperation of a user to the image forming apparatus 1000, login isexecuted e.g. when the user selects a function requiring userauthentication, another operation method for user authentication may beprovided. As another operation method for user authentication, forexample, a function button may be added to the home screen 7001, for usein explicitly performing a login operation.

Aspects of the present invention can also be realized by a computer of asystem or apparatus (or devices such as a CPU or MPU) that reads out andexecutes a program recorded on a memory device to perform the functionsof the above-described embodiments, and by a method, the steps of whichare performed by a computer of a system or apparatus by, for example,reading out and executing a program recorded on a memory device toperform the functions of the above-described embodiments. For thispurpose, the program is provided to the computer for example via anetwork or from a recording medium of various types serving as thememory device (e.g., computer-readable medium).

While the present invention has been described with reference toexemplary embodiments, it is to be understood that the invention is notlimited to the disclosed exemplary embodiments. The scope of thefollowing claims is to be accorded the broadest interpretation so as toencompass all such modifications and equivalent structures andfunctions.

This application claims the benefit of Japanese Patent Application No.2013-015647, filed Jan. 30, 2013, which is hereby incorporated byreference herein in its entirety.

What is claimed is:
 1. An image forming apparatus to which a user iscapable of instructing execution of one function out of a plurality offunctions including at least a print function, the image formingapparatus comprising: a display device configured to displayinformation; and at least one controller having a processor thatexecutes programs stored in a memory or circuitry having functionsimplemented therein, the controller being configured to: hold aplurality of print jobs including a print job associated with a user;and control the display device to display, in response to an instructionto execute the print function, a screen including a list of print jobsof which a print instruction is available but has not yet beeninstructed, wherein in a first case where the user has not beenidentified when the execution of the print function is instructed, thecontroller controls the display device to display the screen includingthe list of print jobs in which all of the plurality of print jobs areincluded in the list, and in a second case where the user has beenidentified when the execution of the print function is instructed, thecontroller controls the display device to display the screen includingthe list of print jobs in which only the print job associated with theidentified user out of the plurality of print jobs is included in thelist, and wherein the controller controls, in the first case when thescreen including the list of print jobs in which all of the plurality ofprint jobs are included in the list is displayed, display of the displaydevice so as to disable deletion of the all of the plurality of printjobs displayed on the screen, and the controller controls, in the secondcase when the screen including the list of print jobs in which only theprint job associated with the identified user out of the plurality ofprint jobs is included in the list is displayed, display of the displaydevice so as to enable deletion of the print jobs associated with theidentified user displayed on the screen.
 2. The image forming apparatusaccording to claim 1, wherein the controller identifies the user basedon a user authentication process.
 3. The image forming apparatusaccording to claim 2, wherein the controller requests the user to inputa name of the user in the user authentication process.
 4. The imageforming apparatus according to claim 2, wherein the controller requeststhe user to input a password in the user authentication process.
 5. Theimage forming apparatus according to claim 2, wherein the controllerdoes not execute the user authentication process when the print functionout of the plurality of functions is instructed to be executed, butexecutes the user authentication process when a function different fromthe print function out of the plurality of functions is instructed to beexecuted.
 6. The image forming apparatus according to claim 5, whereinthe function different from the print function out of the plurality offunctions is a scan function.
 7. The image forming apparatus accordingto claim 6, further comprising a scanner that reads an original.
 8. Theimage forming apparatus according to claim 5, wherein the controller isconfigured to set whether or not the user authentication process is tobe executed when the execution of the print function is instructed. 9.The image forming apparatus according to claim 1, wherein in a thirdcase where the user has been identified as an administrator when theexecution of the print function is instructed, the controller controlsthe display device to display the screen including the list of printjobs in which all of the plurality of print jobs are included in thelist, while also controlling display of the display device so as toenable deletion of the all of the plurality of print jobs displayed onthe screen.
 10. The image forming apparatus according to claim 1,wherein the controller specifies, based on user information given to aprint job acquired from an external apparatus, a user associated withthe acquired print job.
 11. The image forming apparatus according toclaim 1, wherein the controller holds, when determining that a print jobacquired from an external apparatus is an object to be held, the printjob.
 12. The image forming apparatus according to claim 11, wherein thecontroller holds, when determining that the print job acquired from theexternal apparatus has a password added thereto, the print job.
 13. Theimage forming apparatus according to claim 1, further comprising aprinter that forms an image on a sheet.
 14. The image forming apparatusaccording to claim 13, wherein the printer forms the image on the sheetafter execution of a selected print job is instructed through thedisplayed screen including the list of print jobs of which the printinstruction is available but had not yet been instructed.
 15. The imageforming apparatus according to claim 1, wherein the controller controlsthe display device to display a function selection screen includingselection objects respectively corresponding to functions to be executedout of the plurality of functions, and the controller accepts theexecution of the print function in response to a print function objectbeing selected.
 16. The image forming apparatus according to claim 1,further comprising a console that accepts a user's operation.
 17. Theimage forming apparatus according to claim 1, further comprising astorage device configured to store print data used for printing.
 18. Theimage forming apparatus according to claim 1, wherein the image formingapparatus operates in any one of a function-based authentication modeand a login mode.
 19. A method of controlling an image forming apparatusto which a user is capable of instructing execution of one function outof a plurality of functions including at least a print function, themethod comprising: holding a plurality of print jobs including a printjob associated with a user; and causing a display device of the imageforming apparatus to display, in response to an instruction to executethe print function, a screen including a list of print jobs of which aprint instruction is available but has not yet been instructed, whereinin a first case where the user has not been identified when theexecution of the print function is instructed, the display device iscaused to display the screen including the list of print jobs in whichall of the plurality of print jobs are included in the list, and in asecond case where the user has been identified when the execution of theprint function is instructed, the display device is caused to displaythe screen including the list of print jobs in which only the print jobassociated with the identified user out of the plurality of print jobsis included in the list, and wherein in the first case when the screenincluding the list of print jobs in which all of the plurality of printjobs are included in the list is displayed, the display device is causedto display the screen so as to disable deletion of the all of theplurality of print jobs displayed on the screen, and in the second casewhen the screen including the list of print jobs in which only the printjob associated with the identified user out of the plurality of printjobs is included in the list is displayed, the display device is causedto display the screen so as to enable deletion of the print jobsassociated with the identified user displayed on the screen.
 20. Anon-transitory computer-readable storage medium storing a computerprogram for causing a computer to execute a method of controlling animage forming apparatus to which a user is capable of instructingexecution of one function out of a plurality of functions including atleast a print function, the method comprising holding a plurality ofprint jobs including a print job associated with a user; and causing adisplay device of the image forming apparatus to display, in response toan instruction to execute the print function, a screen including a listof print jobs of which a print instruction is available but has not yetbeen instructed, wherein in a first case where the user has not beenidentified when the execution of the print function is instructed, thedisplay device is caused to display the screen including the list ofprint jobs in which all of the plurality of print jobs are included inthe list, and in a second case where the user has been identified whenthe execution of the print function is instructed, the display device iscaused to display the screen including the list of print jobs in whichonly the print job associated with the identified user out of theplurality of print jobs is included in the list, and wherein in thefirst case when the screen including the list of print jobs in which allof the plurality of print jobs are included in the list is displayed,the display device is caused to display the screen so as to disabledeletion of the all of the plurality of print jobs displayed on thescreen, and in the second case when the screen including the list ofprint jobs in which only the print job associated with the identifieduser out of the plurality of print jobs is included in the list isdisplayed, the display device is caused to display the screen so as toenable deletion of the print jobs associated with the identified userdisplayed on the screen.